Vulnerabilities / Threats // Insider Threats
6/10/2010
06:23 PM
Cora Nucci
Cora Nucci
Slideshows
Connect Directly
RSS
E-Mail
50%
50%
Repost This

Image Gallery: 5 Early Android 2.2 Candidates

Google's Nexus One, the original Android 2.1 phone, will be the first to update to Android 2.2 and at least four HTC handsets are slated for the initial wave of Froyo updates expected in the second half of the year.
Previous
1 of 5
Next


The Nexus One will be the first to update to Android 2.2. It as a 1 GHz Snapdragon CPU from Qualcomm and comes with 512MB of ROM, 512MB of RAM, and a 3.7-inch AMOLED 480 x 800 touch screen. The Nexus One weighs 130 grams, about as much as a Swiss army knife. It includes a 5 MP camera with an LED flash, stereo Bluetooth support, a 3.5 mm headphone jack and two microphones -- one on the bottom and one on the back -- for active noise cancellation.

Android 2.2: Ready For Enterprise?
Google is touting its new mobile platform's business-friendly features, but licensing Microsoft's ActiveSync may not offer enough security to make Android ready to work in the enterprise.

Previous
1 of 5
Next
Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2011-0460
Published: 2014-04-16
The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map.

CVE-2011-0993
Published: 2014-04-16
SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors.

CVE-2011-3180
Published: 2014-04-16
kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in the path of an overlay file, related to chown.

CVE-2011-4089
Published: 2014-04-16
The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.

CVE-2011-4192
Published: 2014-04-16
kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as demonstrated by "double quotes in kiwi_oemtitle of .profile."

Best of the Web